
<!DOCTYPE html
  PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
   
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="DC.Type" content="topic">
<meta name="DC.Title" content="CA Certificates">
<meta name="product" content="">
<meta name="prodname" content="">
<meta name="version" content="">
<meta name="brand" content="Online_help_nwh">
<meta name="DC.Publisher" content="20231121">
<meta name="DC.Format" content="XHTML">
<meta name="DC.Identifier" content="EN-US_TOPIC_0000001436937801">
<meta name="DC.Language" content="en-us">
<link rel="stylesheet" type="text/css" href="public_sys-resources/commonltr.css">
<title>CA Certificates</title>
</head>
<body style="clear:both; padding-left:10px; padding-top:5px; padding-right:5px; padding-bottom:5px"><a name="EN-US_TOPIC_0000001436937801"></a><a name="EN-US_TOPIC_0000001436937801"></a>

<h1 class="topictitle1">CA Certificates</h1>
<div><div class="section" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_zh-cn_topic_0152871881_section77355284357"><h4 class="sectiontitle">Function Description</h4><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152872047_p1742212298449">On the <span class="uicontrol" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_uicontrol4556491844"><b>CA Certificates</b></span> page, you can view and upload the CA certificate.</p>
</div>
<div class="section" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_section1883034704715"><h4 class="sectiontitle">Parameter Description</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_table1971519357295" frame="border" border="1" rules="all"><caption><b>Table 1 </b>CA Certificates</caption><thead align="left"><tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row7715123532916"><th align="left" class="cellrowborder" valign="top" width="24.95%" id="mcps1.3.2.2.2.3.1.1"><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p831755919312">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="75.05%" id="mcps1.3.2.2.2.3.1.2"><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p11317185915314">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row8716123542912"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_zh-cn_topic_0298044815_p1314393911910">Issued By</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p1948655014187">Issuer of the CA certificate. <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b114867500185">Issued By</strong> and <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b1348616509185">Issued To</strong> have the same parameters.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row1671613572914"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152872072_p983281810599">Issued To</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p1848616506183">User (current server) of an CA certificate, including:</p>
<ul id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_ul18486175012187"><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li348685061815"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b1486185061815">CN</strong>: user name.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li17486155081813"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b1486125011819">OU</strong>: department of the user.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li6486185015183"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b17486195015181">O</strong>: company to which the user belongs.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li6486145011186"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b1648665031813">L</strong>: city of the user.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li44866505188"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b9501105051813">S</strong>: state or province of the user.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li8501145051817"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b9501750101813">C</strong>: country of the user.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row1771643572912"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152872072_p138327188598">Validity Period</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p1673310105256">Validity period of the CA certificate.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row10716183562917"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152872072_p1358915201499">Serial Number</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p55171450151813">Serial number of the CA certificate, used for identifying and migrating the certificate.</p>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row67164354298"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p1072214223488">CRL</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><div class="p" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p141452391199">CA certificate revocation status.<ul id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_ul46869351597"><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li19686133519913"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b14107164013813">Configured</strong>: The certificate revocation file has been uploaded, and a certificate revocation verification will be performed when a TLS connection is set up.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_li146872351791"><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_b1010716400818">Unconfigured</strong>: The certificate revocation file is not uploaded.</li></ul>
</div>
<div class="note" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_note17951193823413"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_p89511138163416">The certificate revocation file is Base64-encoded and in <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b63301918405">*.crl</strong> format. It cannot exceed 100 KB.</p>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row12716193532911"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p1321713614306">CRL Validity Period</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p172178653012">Validity period of the CA certificate revocation list (CRL).</p>
<div class="note" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_note51812538301"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152871986_p1418114530309">If the CRL expires, the CA authentication function will be unavailable.</p>
</div></div>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row157161335102917"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_zh-cn_topic_0298041725_p98934711326">Search</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_zh-cn_topic_0298041725_p485421714319">Type a keyword in the search box and press <span class="uicontrol" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_zh-cn_topic_0298041725_uicontrol386351412279"><b>Enter</b></span> or click <span><img id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_image1205194219377" src="figure/en-us_image_0000001269020120.png"></span> to find the CA certificate that meets the required conditions.</p>
<ul id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_ul158613219297"><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li858612320299">Click <span><img id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_image17163230152417" src="figure/en-us_image_0000001437165901.png"></span>, and certificate information is displayed in cards.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li9488163572912">Click <span><img id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_image4940940192410" src="figure/en-us_image_0000001386567100.png"></span>, and certificate information is item listed.</li></ul>
</td>
</tr>
<tr id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_row127163352297"><td class="cellrowborder" valign="top" width="24.95%" headers="mcps1.3.2.2.2.3.1.1 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_p1571613513292">Delete</p>
</td>
<td class="cellrowborder" valign="top" width="75.05%" headers="mcps1.3.2.2.2.3.1.2 "><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_p20716135132917">Move the cursor to the certificate that you want to delete and click <span><img id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_image331208152" src="figure/en-us_image_0000001386726628.png"></span> or <span class="uicontrol" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_uicontrol1825511934512"><b>Delete</b></span>.</p>
<div class="note" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152872101_note7576155144716"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_en-us_topic_0152872101_p17576135154716">Root certificates can be deleted only when the two-factor authentication function is disabled.</p>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_section3598173061617"><h4 class="sectiontitle">Configuring a CRL</h4><div class="note" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_note53811410204419"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_p18381191010441">The certificate revocation file is Base64-encoded and in <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b965025633917">*.crl</strong> format. It cannot exceed 100 KB.</p>
</div></div>
<ol id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_ol1529105415592"><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li14291054135918"><span>Obtain the CRL file from the CA.</span></li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li72975435914"><span>In the Certificate Information area, click <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b62965417592">Upload</strong> next to <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b5291154195917">CRL</strong>.</span></li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li2292547594"><span>Select the CRL file.</span></li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li20292054165915"><span>Enter the password of the login user and click <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b1929954195915">Save</strong>.</span></li></ol>
</div>
<div class="section" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_section1354186201914"><h4 class="sectiontitle">Uploading the CA Certificate</h4><ol id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_ol1163019286575"><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li1163018287576"><span>Select the <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b2016062910237">CA Certificates</strong> and click <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b10248241112315">Upload Certificate</strong>.</span><p><p id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_p663022815574">A dialog box for local file selection upload is displayed.</p>
<div class="note" id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_note197887403577"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><ul id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_ul1893154617574"><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li8643711122414">Server root certificates in <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b1237154317399">*</strong><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b29311846175710">.cer</strong>, <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b437614643918">*</strong><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b293119468575">.crt</strong>, or <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b1810544943915">*</strong><strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b4931154685714">.pem</strong> format are supported.</li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li49311946175719">Client certificates in <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b29311046155719">*.p12</strong> or <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b119311469576">*.pfx</strong> format are supported.</li></ul>
</div></div>
</p></li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li14630162895718"><span>Select a file in the correct format.</span></li><li id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_li11631132812574"><span>Click <strong id="EN-US_TOPIC_0000001436937801__en-us_topic_0000001436833801_b156312028145712">OK</strong>.</span></li></ol>
</div>
</div>
<div></div>

</body>
</html>